Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2901 3.5 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-3254 2026-04-27 11:22 2026-04-22 Show GitHub Exploit DB Packet Storm
2902 9.9 緊急
Network 		Linux Foundation Spinnaker Linux FoundationのSpinnakerにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-32604 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
2903 9.9 緊急
Network 		Linux Foundation Spinnaker Linux FoundationのSpinnakerにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-32613 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
2904 7.8 重要
Local 		Podman project podman Podman projectのpodmanにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33414 2026-04-27 11:22 2026-04-14 Show GitHub Exploit DB Packet Storm
2905 6.1 警告
Network 		オラクル Oracle Identity Manager オラクルのOracle Identity Managerにおける複数の脆弱性 CWE-284
CWE-601
CVE-2026-34283 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2906 6.1 警告
Network 		オラクル Oracle Business Process Management Suite オラクルのOracle Business Process Management Suiteにおける複数の脆弱性 CWE-284
CWE-601
CVE-2026-34284 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2907 8.7 重要
Network 		オラクル Oracle HTTP Server オラクルのOracle HTTP Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34291 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2908 7.2 重要
Network 		オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34292 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2909 6.5 警告
Network 		オラクル PeopleSoft Enterprise SCM Purchasing オラクルのPeopleSoft Enterprise SCM Purchasingにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34295 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2910 4.3 警告
Network 		オラクル Oracle Agile Product Lifecycle Management for Process オラクルのOracle Agile Product Lifecycle Management for Processにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34296 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316261 10.0 CRITICAL
Network 		- - Rejected reason: User data field is not attacker controlled - CVE-2023-4262 2024-08-1 09:15 2023-09-28 Show GitHub Exploit DB Packet Storm
316262 - - - ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component En… CWE-79
Cross-site Scripting 		CVE-2024-7299 2024-08-1 01:15 2024-07-31 Show GitHub Exploit DB Packet Storm
316263 - - - When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive informat… - CVE-2024-7205 2024-08-1 00:15 2024-07-31 Show GitHub Exploit DB Packet Storm
316264 - - - A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Regis… CWE-79
Cross-site Scripting 		CVE-2024-7321 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316265 - - - A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. … CWE-89
SQL Injection 		CVE-2024-7320 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316266 - - - A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the… - CVE-2024-7311 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316267 6.5 MEDIUM
Network 		- - The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including, 0.21.7. The function … - CVE-2024-7135 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316268 4.9 MEDIUM
Network 		- - The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘html’ parameter in … - CVE-2024-6725 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316269 - - - A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file sort_user.php. The manipulation of t… CWE-79
Cross-site Scripting 		CVE-2024-7310 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm
316270 - - - A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument s… CWE-79
Cross-site Scripting 		CVE-2024-7309 2024-07-31 21:57 2024-07-31 Show GitHub Exploit DB Packet Storm